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Abstract 

A classical result of Dirichlet shows that certain elementary character 
sums compute class numbers of quadratic imaginary number fields. We 
obtain analogous relations between class numbers and a weighted charac- 
ter sum associated to a 2-isogeny of elliptic curves. 

1 Introduction 

We begin by recalling a famous result of Dirichlet which calculates the class 
number of a quadratic imaginary number field of prime discriminant via a finite 
sum. Throughout, we let p > 3 denote a prime number. Let (-) denote the 
usual Legendre symbol on F* : 

' +1 aeF* 2 
-f a^F* 2 . 

The symbol is extended to all of Z via the reduction map Z — > F p , and the 
definition (|) = when (a,p) > I. We let h p denote the class number of 
Q(y/—p). For notational convenience, we set 



h p 



p = 1 (mod 4) 
h p p = 3 (mod 4). 



The following consequence of Dirichlet's class number formula (e.g., [H Ch. 6] 
is well-known: 



Theorem 1 (Dirichlet). For any prime p > 3, 



This article has been accepted for publication in the Bulletin of the London Mathematical 
Society. However, it does not reflect any changes or corrections between acceptance and 
publication; the two versions may be different. 

2000 Mathematics Subject Classification: 11G05 (primary), 11R29, 11T24, 11G20 (sec- 
ondary) 

This research was supported in part by the Van Vleck Fund at Wesleyan University. 



1 



We consider the following point of view for Dirichlet's result. The F p -rational 
morphism </>: G m —> G m denned by 4>{x) — x 2 partitions the points of G TO (F p ) = 
Fp into two sets - those that are the image of an F p -rational point of the domain 
(i.e., the quadratic residues), and those that are not (the non- residues). The 
character X4> '■— ( p ) is now precisely the natural identification of the cokernel of 
4> with {±1} which makes the following sequence exact: 

G m {¥ p ) G m (¥ p ) {±1} . 

Note that it is the properties of (f>, not the underlying algebraic group G m , 
which allow this construction. This paper demonstrates that an analogous pro- 
cedure, arising from a different morphism of algebraic groups, yields new char- 
acter sums with similar arithmetic properties. Let r be a degree 2 isogeny of 
elliptic curves defined over F p . We define a weighted character sum S T , anal- 
ogous to the sum appearing in (JT|). The quantity S T is shown to be divisible 
by p, and a strong relationship between S T and h* is established. 
Remark. Throughout this article, we study sums of the form ^ g(x)x(x), where 
a priori the values of g(x) lie in the finite field F p . We use the following con- 
vention, so as to view the value of the sum as an integer: Each summand is the 
scaling of the character value x( x ) G M-2(C) = {±1} by the unique integral lift 
of g(x) in the range [0,p). For clarity, we use braces {•} to denote the lifting 
Fp^Zn [0,p) explicitly. 

In some proofs, it will be convenient to view sums of the form X)x=o m " 
terchangeably as sums over F p or as sums over the range [0,p) of integers. 
Consequently, there will occasionally be a mild abuse of notation - for example, 
given a € Z, we may write {a} to mean {a}, where a is the reduction of a mod 
P- 



CM Example 

We begin with two typical results, both special cases of the main theorem. 
Consider first the elliptic curve 

y 2 = (x + 2)(x 2 -2), (2) 



which possesses complex multiplication by %\\J— 2]. As this ring possesses ele- 
ments of absolute norm 2, there exist endomorphisms of degree 2 on E. These 
endomorphisms admit reductions defined over F p whenever p is a prime of good 
and ordinary reduction (equivalently, {-^-) — 1)- For a specific choice of t (sec 
§4), we set 

This defines a character on _E(F p ), and the following sequence is exact: 

E(¥ p ) E(¥ p ) n 2 ^ . 

The following is a consequence of the main theorem: 
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{x(P)} X AP) = h* (4) 



Proposition 2. Let p > 3 be a prime of good and ordinary reduction for the 
elliptic curve E given in ([2]). Then 

- l £ 

p ^ 

r P£E(W P ) 

Remark. It is not a priori clear that the sum in (j4j (nor the sum in ([IJ, for 
that matter) is divisible by p. We note that the two sums appearing in ([TJ and 
(jU are not the same expressions, even though they both compute h*. This is 
immediate from the observation that E and G m need not have the same number 
of points over ¥ p . Here is an explicit example: When p = 11, one has 

E(F U ) = {oo, (7, ±4), (8, ±2), (9, 0)}, r(£(F u )) = {ex., (7, ±4)}. 

Hence, ((4]) evaluates as 

-1.(7 + 7- 8- 8-9) = 1, 
whereas the classical expression ([TJ yields 

-1(1 - 2 + 3 + 4 + 5- 6- 7- 8 + 9- 10) = 1. 

Non-CM Example 

This connection between weighted character sums and class numbers is not 
unique to isogenies arising from complex multiplication. Consider the elliptic 
curves 

Ei/Q: y 2 = x 3 + 2x 2 - x, 
E 2 /Q: y 2 = x 3 - Ax 2 + 8x, 
and the following isogeny of degree two: 

r:E 1 ^E 2 , T ( x >V> = \rf> ^ 

The curves E\ and E 2 have good reduction away from 2. For any odd prime 
p, t induces an isogeny between the reductions of E\ and E 2 over F p , and 
this morphism is in fact F p -rational. Hence, there exists a homomorphism 
r: Ei(¥ p ) —> E 2 (¥ p ). As in the previous example, we consider the character 

Xr- E 2 (¥ p )^{±l}, 

where Xt(P) = +1 if and only if P € r(£ , i(F p )). Again we find a strong 
relationship between h* and the weighted character sum 



S T := £ HP)-2}xAP). 

PeE 2 (¥ p ) 

P^too 

The following is a special case of the main theorem (see §4, Example [TJ: 
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Proposition 3. With E\, E2, and r as above, and any prime p > 3, we have 
p o T - n p . 

Main result 

The main theorem generalizes the previous examples, which each relate h* to a 
weighted character sum. Suppose Ex/Q, E 2 /Q are elliptic curves and r: E\ — >• 
E 2 is a Q-rational 2-isogeny. For any prime p of good reduction, there is an 
Fp-rational isogeny t p : Ei/¥ p — > E 2 /¥ p . Hence, r induces a family of isogenies 
{t p }, indexed by the primes of good reduction. To each of these isogenies, there 
is an associated character Xt = Xr.p, and an associated weighted character sum 
S T , P (defined below). As in the above examples, the quotient — |SV,p always 
approximates h* well, in the sense that there is an absolute bound for the error 
as p varies among all primes of good reduction. 

Concretely, let a, b € Z, and let Ei/Q and E2/Q be the elliptic curves given 
by the following Weierstrass models: 

Ei : y 2 = x 3 + ax 2 + bx, 

E 2 : y 2 = x 3 - 2ax 2 + (a 2 - 4b)x 

Let t : Ei — > E% be the explicit isogeny given in ([7]) . 

Main Theorem. Let Ei, E 2 , and r be as above, and let p > 3 be a prime of 
good reduction for Ei and E 2 . 

(a) For all such p, the weighted character sum 

Sr tP --= E {<P)-d}Xr(P) 

P£E 2 (¥ P ) 
P^oo 

is divisible by p. 

(b) S T>P approximates — ph* in the following sense: the quantity 

Ra,b{p) = S Tp — h* 

P P 

is bounded in absolute value by a constant C T , independent of p. 

(c) If there exists one p > \a\ such that R a ,b{p) — 0, then there exists a set 
of primes of positive density for which S T , P — h*, determined by explicit 
congruence conditions. 

The remainder of the paper is organized as follows. In §2, we collect relevant 
facts about 2-isogenies over finite fields, and compute the cokernel character 
Xt m terms of the Tate pairing. In §3, we prove the main theorem. The 
proof combines classical techniques for evaluating character sums with formulas 
deduced from the Tate pairing. In §4, we extend the theorem to isogenies not 
specifically of the form ([T|). in particular the degree 2 endomorphisms existing 
on elliptic curves with complex multiplication by 1>\\J — 1], Z[v / — 2], and — 7]. 
An analogous result for the dual isogeny f of ((7]) is given in the Appendix. 
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2 Preliminaries 



Our strategy for the proof of the Main Theorem will be to convert the characters 
in the introduction into explicitly computable Legendre symbols. For this, we 
recall some facts about isogenies of degree 2 and the mechanics of the Tate 
pairing attached to an isogeny. 



Degree 2 isogenies 



Let K be an arbitrary field with char K ^ 2, and let E\ and be elliptic 
curves defined over K. Let 4>: E\ — > E% be an isogeny of degree 2 defined over 
K. Necessarily, this implies that both E\ and E2 possess if-rational points of 
order 2 (generating the kernels of <p and the dual <f>, respectively). Hence, by 
appropriate changes of coordinates, E\ and E2 are isomorphic over K to elliptic 
curves E[ and E' 2 , respectively, which each possess Weierstrass equations of the 
form y 2 = fi(x), with /i(0) = /2(C)) = 0. In fact, we may always simultaneously 
choose isomorphisms a; : Ei —¥ E[ such that: 



(i) E[ has the Weierstrass model y 2 — x 3 + ax 2 

(ii) E'2 has the Weierstrass model y 2 = x 3 — 2ax 2 

(iii) There exists a if -rational 2-isogeny t: E[ — > 
diagrams commute: 



bx with a,b € K; 
rx. with r = a 2 - 



46: 



E' 2 such that the following 




E 2 ^E' 



(6) 



■E[ 



The explicit formulas for r and its dual are well-known III. 4. 5]: 

(y 2 y{b-x 2 ) \ ( y 2 y(r - x 2 ) \ 

Placing the isogeny in this form will simplify the computations involving the 
Tate pairing. We will show how to treat more general 2-isogenies in Section 4. 



The Tate pairing 

Let £ and p be prime numbers such that p = 1 (mod £) , and let E\ and E2 be 
elliptic curves defined over F p . Let t : E\ — > E 2 be an isogeny of degree £ defined 
over F p , and let f denote the dual isogeny. Let us assume that E\[t\ C Ei(¥ p ) 
and E 2 [f] C E 2 {W P ), and let T\ and T 2 generate the groups E\[t] and ^[f], 
respectively. The Tate pairing associated to r is a function 
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which is bilinear and non-degenerate on the left. (See, for example, [7J X.l.l], 
which develops the properties of tf)[ m ] . The proofs for tp T are essentially iden- 
tical.) We can explicitly compute V-V as follows. The points T\ and T 2 are of 
exact order £, as is any R G r -1 ^). Thus, there exist functions / on E 2 and 
g on Ei whose divisors are: 



(f) = £(T 2 )-£(oo), 



e-i 



(g) = r*((T 2 ) - (00)) = ]T(i? + iTx) - ^(iTi). 

i=0 i=0 

Scaling either / or g by a constant if necessary, we have an equality of functions 
for = g e . For a point S G £ 2 (F p ), let [S] denote its image in E 2 (¥ p )/t(E 1 (¥ p )). 
If 5 G £ 2 (F p ) and [S] ^ [T 2 ], [00], we define 

i> T {[S],T 2 ) :=f(S) (modFf). 

In case [S] G {[T 2 ], [00]}, we choose a point Q ^ {^2,00} on i? 2 and set 

MiS],T 2 ) := t^±^ (modFf). 

As -E^f] is generated by T 2 , we may recover the entire pairing by bilinearity, 
since we have ip T ([S],kT 2 ) = ip T ([S], T 2 ) k . Thus, the following definition is 
complete: 



f f(S) k [S]£{[T 2 ],[oo]} 
ip T ([S],kT 2 ) := ■{ f f(s+Q ) \ k 
f(Q) 



[5]€{[T 2 ],[oo]}. 



Formulas for 2-isogenies 

We now specialize to the case of the degree 2 isogenics r and f given in ([7]). 
Definition 4. Define a character \t '■ E 2 (¥ p ) — > \i 2 by 

y (P)-( +1 

We compute this character explicitly in terms of the pairing tp T . This allows 
us to replace \t with expressions involving the Legendre symbol, and so eval- 
uate the weighted character sum S T from the introduction. We let T\ and T 2 
respectively denote the point (0,0) G Ei(¥ p ), which generates £i[r], and the 
point (0,0) G E 2 (¥ p ), which generates E 2 [f]. 

Proposition 5. Suppose t : E\ — > E 2 is of the form ([7|), and let P = (x,y) G 
E 2 (¥ p ). Then 

[P] ¥> [T2], [00] 
XT (P)=i; T ([P},T 2 )={ (t) [P] = [T 2 ] 

[P] = [<*>], 




G 



where in the second equality we canonically identify F*/F* 2 with \i 2 via the 
Legendre symbol. 

Proof. For the statement that %(•) = !/i T (-,T 2 ), we must show that a point 
P e E 2 (¥ p ) is in the image of r if and only if ip T ([P],T 2 ) = 1. By bilinearity, 
ip T ([P],kT 2 ) = iJj T {[P],T 2 ) k . As E 2 [f] is generated by T 2 , P pairs trivially with 
T 2 if and only if it pairs trivially with every element of E 2 [f] . By the left non- 
degeneracy of tpT, this occurs if and only if [P] represents the trivial class of 
E 2 (¥ p )/t(Ei(F p )), i.e., P is in the image of r. 

To prove the second equality, we now compute ^ r ( [P] , T 2 ) explicitly. Func- 
tions / and g whose divisors are given in ([8|) are f{x,y) = x, g(x,y) = No 
scaling is necessary, as we have 



Thus, ip T ([P],T 2 ) is a square in F* if and only if (-) = 1. This proves the 
second equality when [P] ^ ^2], [00]. The result is trivial for [P] = [00]. It 
remains to prove ^ T ([T 2 ],T 2 ) = (^). Notice that T 2 g t(Ei(¥ p )) if and only if 
-Ei [2] C -Bi(Fp). From this we see 



Dual Isogeny Formulas 

Finally, we note that we can provide an equally explicit result for the pairing 
attached to the dual f . The cokernel character xt is defined by 



f(T(P))=x(T(P))=* 1 =g 2 (P). 



Vv([T 2 ],T 2 ) = +l 




□ 



Remark. In fact, [T 2 ] = [00] if and only if (^) = 1. 




P g f (E 2 (¥ p )) 
Pif{E 2 {¥ p )). 



Let / and g be the functions on E\ whose divisors are 



(/) = 2(1-0-2(00), 
(s) = f*((T0-(co)). 



For example, take f(x, y) 



x, and g(x,y) = £ 



. Then the associated pairing 



ipf- 



E^Fp) 



x E x [t] 
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may be computed via 

r f(s) k 

[S\€{[Tl],[<x>]}- 



^ f ([S],feTi) = { // ( s+Q)\ fc 



HQ) 

Proposition 6. For any P — (x, y) G E\{¥ p ), 

( (|) [Pj^tTxlJoo] 

xt=MnTi)= (J) ^] = [ri] 

I i [P] = [oo]. 
Proof. The argument parallels Proposition [5] exactly. □ 



3 Weighted character sums 

There are well-established connections between arithmetic data and character 
sums arising from elliptic curves. If y 2 — f(x) is an integral model for an elliptic 
curve over Q with complex multiplication, and p is a prime of good reduction, 
then the work of Deuring [3] demonstrates that character sums of the form 

x=l 

can be computed in terms of the trace of Frobenius and the splitting of p in 
the endomorphism ring of the curve. Similar results have been established 
by many different authors. We mention, for example, the works of Williams 
[TO] . Joux-Morain [4], and Padma-Venkataraman [6], which each take slightly 
different approaches to such character sums, consolidate many previous results, 
and contain comprehensive bibliographies. 

We briefly contrast these character sums to those contained in the present 
paper. First, the character Xt is determined by an isogeny, not an elliptic 
curve. Second, the terms of the sum are weighted by a non-trivial integer-valued 
function^. To the authors' knowledge, these sums have not been extensively 
studied. 

We recall our convention to use {•} to denote the lifting ¥ p — > Zn [0,p), and 
introduce a second convention that a primed sum over the points on an elliptic 
curve will exclude the point at infinity on that curve. Under these conventions, 
we seek to evaluate the sum 

Y! {x(P)-a}xr(P), (9) 

PeE 2 (¥ p ) 

where r is the isogeny given in 0. Here, we are taking E\, E2, and r to be 
defined over ¥ p . 

This is necessary if we hope to obtain interesting results, since trivially we have 
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Wc first evaluate a useful character sum. For a given prime p and k 6 Z 
such that p { fc, we define 



4 := 



(!) = 



1 fc = □ (mod p), 
k^D (mod p). 



Lemma 7. For any integer k relatively prime to p, 



p-i 

E< 



-pSk 



(10) 



Proof. Let S be the sum. Then by substituting u n- p — it, we find 



Therefore, 



p-i 



(p — w) 2 + k 



=*>E 

u=l 



s. 



25 _ ^ / it 



E 

u=0 



u 2 + k 
P 



p-i 

p+E 

u=0 



(11) 



Let C /F p be the conic u 2 + kw 2 — v 2 . The final term in (fTTj) counts the number 
of Fp-rational points on C within the affine region w ^ 0. Since (p, k) = 1, the 
conic is birational to P 1 and has p + 1 points. Exactly two of these, (1 : ±1 : 0), 
lie on w = 0, so the affine region contains p — 1 points. Thus 



5=? 



-(£)-P+(P-l) 



= 1 



-fl 

2 V 



= -p4, 



which completes the proof. 



□ 



Remark. Sums of the form (|10j) will appear in the proof below, with u = x — a. 
This motivates the choice g = x(P) — a as the weight in ([9]). We mention in 
passing that this function g has an interesting geometric description: If Qi = 
(cti,0) are the 2-torsion points on E2 which are not in the kernel of f, then 
a = ji a i + a 2)- That is, we may think of g = as the unique vertical line 
which intersects the x-axis at a point equidistant to both Qi and Q 2 . 

As always, let p > 3 be prime. We have already seen at the start of §2 that 
we may transform any F p -rational 2-isogeny into the isogeny r of (J7j| . Then the 
isogeny r is between the curves 



E 7 : 



y 



fi(x) = x 3 + ax 2 + bx, 



a,be¥ 



v 



y 2 = f 2 (x) 



2ax 2 



46. 
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Recall that T :— (0,0) € E%(F P ) generates the kernel of f. Our goal is to 
evaluate the sum 

5 T := ^ {s(P)-a}x r (P). (12) 

-PeB 2 (F p ) 

For convenience, we define an error term: 

{a}-l 

R a , b :=5. b - (§)• 

x=l 

Proposition 8. Let p > 3 be prime, and E\, E2, t, and S T as above. Then S T 
is divisible by p and 

- -S T = hl + R a . b . (13) 

p 

Further, \R a ,b\ < {&}• 

Proof. The bound on R a ,b is immediate. As h* and R a ,b are integers, it remains 
only to establish (fT3")) . Applying Proposition [Si we have: 

S T = J2' ^(P)-a)xr(P) 

P£E 2 (F P ) 

= {x(T)-a} X r(T)+ W P )-4(^) 

PG-E 2 (F P ) 



{p + Ei- - «K§ ) (1 + ( * 3 - 2g ; 2+rx )) 

p— 1 p— 1 



{p - «}(=) + £{* - «K§) + £{* - 



-4fn 



-46 \ 



a:— 1 a: — 1 

= E{^-4(f)+E{^-«}(^ 

x— 1 a;— 

We evaluate these two sums in turn. First, 

p— 1 {a}— 1 p— 1 

E{*- a H§)= E (p +{«}-{»»(!)+ E (w-w)(f) 

a=l cc=l :c={a} 

{a}— 1 p— 1 p—1 

=*E(f)+5>(f)-«£(f) 

:r — 1 21 — 1 21 — 1 

{o}-l 

=p E (f)-K- 
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We note that the second sum is unchanged by making the substitution u = x—a. 
Thus, 

X> " = EW(^) = - P 5- b , 

x=0 u=0 

by Lemma [3 Combining the two sums, we have 

5 r = -ph;-pS^ b +p ^ (§)> 

which gives (ITcH) . □ 

The Main Theorem can be viewed as the global version of Proposition [5J 
Consider elliptic curves E±/Q and E2/Q with respective Weierstrass models 

Ei : y 2 = x 3 + ax 2 + bx, 

E 2 : y 2 = x 3 - 2ax 2 + (a 2 - Ab)x, 

with a,b e Z. As always, we let r : E\ — > E2 be the explicit Q-rational 2-isogeny 
given in ([?]). 

Theorem 9. Let t: Ei — > E 2 be as above, and let p > 3 be a prime of good 
reduction. 

(a) For all such p, the weighted character sum 

St, p := {<P)~cl}Xt(P) 

PeE 2 (w p ) 

is divisible by p. 

(b ) S TtP approximates —ph* in the following sense: the quantity 

R a ,b{p) = --S T ,p - K 
p p 

is bounded in absolute value by a constant C T , independent of p. 

(c) If there exists one p > \a\ such that R a ,b(p) = 0, then there exists a set 
of primes of positive density for which S TiP — h*, determined by explicit 
congruence conditions. 

Proof. Part (a) is precisely Proposition|8]applied to any prime of good reduction. 
For part (b), it is enough to bound the number of terms in R a b independently 
of p. If a > 0, this is obvious; the sum has exactly {a} terms, and {a} < a. 
When a = we trivially have C T — 1. Now suppose a < 0. It is no obstruction 
to assume p > \a\, and so {a} = p + a. We have 

^-^- { E(f) = ^-E(f)+ E (!)=«-»+ E (f). 

x = l x=l x = {a} x=p+a 
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and so |i? a ,&| < |o| + 2. 

For part (c), suppose po > \a\ is a prime for which R a ,b{pa) = 0. So p = po 
is a solution to: 

{«}-! 

*->=£(!)■ ( 14 ) 

x=l 

Now, among p > |a|, the individual terms of the sum (fT4"jl never vanish, and so 
the sum is periodic as a function of p, with respect to some sufficiently large 
modulus, e.g., N = 4G, where G is the least common multiple of {2, 3, . . . , \a\ — 
1}. Thus, every prime in the sequence {po + kN} also satisfies R a ,b(p) — 0. □ 

The analogous result for the dual isogeny f is proved in the appendix. 

Remark. It is natural to ask what happens when the hypothesis in part (c) does 
not hold. It is possible that the error term is zero for only finitely many p. For 
example, when (a, b) — (9, — 1), the error term vanishes only for p = 7. It is even 
possible that the error term is never zero (e.g., Example 2 below). Indeed, note 
that by the periodicity modulo N, the error term is never zero if it is non-zero 
for all p < N. 

Remark. For fixed a and varying p, it is not hard to argue that the uniform 
bounds constructed in the proof of Theorem [§] are the best possible. However, 
for a particular value of p, better bounds certainly exist. For example, if a = 
O(logp), then the estimates of Polya- Vinogradov (and later improvements by 
Burgess) may offer substantial improvement. For details, see for example pU 
§9.4]. 



Examples 

We consider a few examples for illustration. In all cases, the selection of values 
(a, b) determines elliptic curves E\, E 2 by ([5]) and an isogeny r by (0. 

Example 1. Set (a, b) = (2, —1). Then we have R a .b(p) = for all primes p > 3. 
Hence, — ^ = h* for all such p. 

Example 2. Set (a, b) = (3,-1). We find R a ,b = — (-), which is non-zero for all 
p > 3. 

Example 3. Set (a, b) = (7,2). Then, for p ^ 5 (i? 0j b(5) ^ by a separate 
calculation), 

= 8-* - £(§ ) = 2 + + (}) + (§) + (I) + (§)■ 

x=l 

We wish to decide when this sum vanishes. By a parity argument, we must have 
£_2 = 0, and of the four remaining Legendre symbols, three must evaluate to — 1, 
and one to +1. Further, we cannot have (|) = 1. Otherwise, R a _b — implies 

(|) = ( ) = ( ) = — 1' contradicting the multiplicativity of the Legendre 
symbol. The three choices for which of the other Legendre symbols is to be — 1 
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each lead to congruence conditions easily determined via quadratic reciprocity. 
Namely, we find: 

-— = h* p= 17,43,67,83,107, or 113 mod 120. 



4 Complex Multiplication 

Having computed the character sums associated to 2-isogenies given in the spe- 
cific form ([?]) ■ we turn to the analogous computation for other 2-isogenies. The 
principal technical lemma is that the character sums arc unaffected by applying 
a change of coordinates x h- > x — e to the curve. This will allow us to change 
the codomain of an arbitrary 2-isogeny to one of the form in ([7]), and allow us 
to compute the corresponding character sums. As a primary application, the 
elliptic curves with complex multiplication by \f— T, \f— 2, or y—7 possess an 
endomorphism of degree 2, and in this section we will compute the associated 
weighted character sum. In particular, we deduce Proposition 

Suppose that <j): E[ — > E' 2 is a degree 2-isogeny defined over F p with p > 3. 
Then there exist F p -isomorphisms on : E[ — > Ei and an isogeny r of the form 
(O such that the left square of the following diagram commutes: 




(15) 



Here, x<f> an d Xt ar e the characters attached <j) and r, respectively. 

Lemma 10. The right square of the above diagram commutes, i.e., X<ji{P') = 
Xr(a 2 (P')) for any P> e E' 2 (¥ p ). 

Proof. This is a simple diagram chase. If X<t>{P') = 1: then there exists a 
point Q' e E'^Wp) such that <j>{Q') = P' . Hence, a 2 (P') = r(ai(Q)) ! and so 
Xr{oi2{P')) = 1 also. This argument is easily reversed, and the result follows. 

□ 

As a consequence, we demonstrate the weighted character sum 

5 := y! H p )-t;}x4P) 

PeE' 2 (w p ) 

equals the sum S T of (fT2"j) , provided a 2 is of a particular form and £ is chosen 
appropriately. Let E' 2 be the elliptic curve 

y 2 = (x - e)(x 2 - 2[ix + v), e,n,v£¥ p . (16) 



13 



defined over ¥ p . Let (j> be an isogeny such that the kernel of the dual isogeny (j> 
is generated by (e, 0) € E' 2 (¥ p ). Set (a, 6) = (fJ,— e, |(/i 2 — z/)), and let Ei,E 2i t 
be as in ([7]). Then the map 

a 2 (x,y) := (x - e,y) (17) 

has the property that f o a 2 and have the same kernel. This guarantees the 
existence of a unique cui satisfying too 2 = a\ o 4>, and in fact, ai completes 
the diagram (fT5|) . Now set £ = e + a, so that 

5 = {x(P)-e-a}x*(P). 

PeE' 2 (¥ p ) 

Lemma 11. = S T . 

Proof. Let p be a prime of good reduction. Applying the previous lemma, we 
have 

S^= {x(P)-s-a}x4>(P) 
PeE' 2 (¥ p ) 

= E' {vfaW) -e-a} X ^\P)) (18) 

PG-E 2 (F P ) 

= Yl {<P)-a\Xr{P) = S T . 

P£E 2 (¥ V ) 

□ 

We now address CM endomorphisms. For each endomorphism (f>, we select 
isomorphisms «i such that 020^1 = 7001, as in diagram (|15l) , and such that E' 2 
and ai have the forms (fT6|) and (p~7j) , respectively. Evaluation of S$ now follows 
from the previous lemma. 

4.1 CM by -1 

Consider first the elliptic curve E/Q : y 2 — x 3 + x, which has complex multipli- 
cation by 1], and possesses the degree 2 endomorphism 

Let E'/Q be the elliptic curve with Weierstrass equation y 2 = x 3 — \x, and let 
r : E' — » 15 be the isogeny corresponding to (a, 6) = (0, — j). If «2 is the identity 
and ai is the isomorphism 

ai{x, y) = (u~ 2 x,u~ 3 y), u=-(l + i), 

then a 2 °^ = "roai. Suppose p > 3 is a prime of good reduction which splits in 
Q(i). Each of the morphisms in the above diagram has a well-defined reduction 
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mod p, and the diagram still commutes after reduction. Applying Lemma 1101 
and Theorem [9l we see 

5*0 = S T = -ph* - P-Ro.-J = ~P- 

This proves: 

Corollary 12. Let p > 3 be a prime, and suppose p = 1 (mod 4). Then 

P PG-E(F P ) 

4.2 CM by -2 

Next, we compute the character sum associated to a degree 2 endomorphism 
on an elliptic curve with complex multiplication by Z[\/— 2]. One such elliptic 
curve is 

£/Q: y 2 = (x + 2)(x 2 - 2). 
One degree 2 endomorphism on E is: 

(z + 2) 2 + 2 y((:r + 2) 2 -2) \ 
-2(a: + 2) ' 2^^ + 2) 2 y ' [ ' 

(This may be derived from the formula given in [8j pg. Ill], but note that we 
are using a different Weierstrass equation.) Let p > 3 be a prime that splits in 
Q(\/— 2), so that = 1. Equivalently, p is congruent to 1 or 3 (mod 8). For 

such primes, there is a well-defined reduction for <p over ¥ p , which we will also 
denote tj>. We now prove Proposition |2J Set 

^:= Y! MP)}X4>(P)- 

pee(¥ p ) 

Corollary 13. For any prime p > 3 such thatp= 1 or 3 (mod 8), —^S^ = h*. 

Proof. Let J3i/Q and E2/Q denote the elliptic curves corresponding to the 
choice (a, 6) = (2, 5) in (0; let r denote the corresponding 2-isogeny. It is 
straightforward to find isomorphisms on with the requisite properties such that 
t o ct\ — cv.2 o (p. Hence, = S T . By Proposition [U — ~S T = h* + R-2,± = h*, 
as R 2 x = if p = 1,3 (mod 8). " □ 

4.3 CM by -7 

Finally, we compute the character sum associated to a degree 2 endomorphism 
on a curve with complex multiplication by Z[ v / — 7]. We take the elliptic curve 

E/Q: y 2 = {x + 7){x 2 -7x + 14). 
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Let p > 3 be a prime which splits in Q(v / ~7), so = 1. Set /3 = . A 

degree 2 endomorphism on E 1 is given explicitly by ([5J pg. Ill]): 

Let Ei and £"2 be the elliptic curves 

Ei/Q(V—l) : y 2 = x 3 + ax 2 + bx, 
E 2 /Q(V^7) :y 2 = x i - 2ax 2 + rx, 

where 

a = §(/3-4), 6=^(3/3 + 14), r = a 2 - 46. 

The curves E, E\, and £2 are all isomorphic over Q(\/— 7). Let ai and 02 be 
the isomorphisms 

ax:E^Ex, (x, y) ^ ((/3 - l) 2 x + /3 + 3, (/? - l) 3 y) , 
a 2 :E->E 2l (x,y) h+ (x + 4- fi,y). 

As before, we have rom = a 2 oc\)^ and each morphism reduces to an F p -rational 
morphism on the reduced curves, as p splits in Q(\/— 7). If we define 

v= E' {*op)}x0(n 

PeB(F p ) 

then S<f, = S T , and we find — -S$ = h* p + R a ,b- 

Unlike all previous examples, however, we do not have a uniform bound for 
the error. Our bound is always in terms of {a}, but in this situation a j£ Z. 
Hence, as a function of p, {a} is not eventually constant, and the previous results 
bounding R a b do not apply. 

Appendix: A proof of a dual isogeny calculation 

Let r and f be the isogenies defined in (JT)), with a, b <G F p for p > 3. Recall that 
we set r = a 2 — 4b. Let r\ = {§}, and define 

x=l 

We wish to evaluate 

S f := {x(P) + f} X f(P). 

PeEi(F p ) 

Theorem 14. For any odd prime p of good reduction, 

- -Sf = « + i?a,fc. (22) 
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Proof. By Proposition [51 we first obtain: 

& = E H^) + f}xf(p) 

PGBi(F p ) 
PjtT lt oo 

-^(|) + E{-+§}(f)(i + (^ !±£ f !± ^)) 
- + X> + §}(!) + X> + f } (^r 4 ) 

a:— 1 a? — 1 

= X>+t}(f)+£{«+§}( ! ^V 

a:— 1 a;— 

The first sum evaluates as follows: 

p—l p—l—Tj p— 1 

E{*+f}(§)= E (w + M)(f)+ E ({*>+m-p)(D 

a;— 1 x—1 x—p—7] 

= !>(§) £ (§) = -^;-p£(i?)- 

a;=l 2=1 x=p—ri x = l 

As for the second sum, we substitute u — x + 1] and apply Lemma [7] to get: 

Combining the above calculations yields the result. □ 

We conclude with a brief comment on the "globalization" of the error term 
for Sf , analogously to Theorem [9] for S T . Take E\ : E2, and t as in ([7]) , with 
a, b G Z. For simplicity, suppose p > a > 0, so that a = {a}. If a is even, 
we have the explicit bound \R a ,b\ < § + 1 for the error term. If a is odd, the 
behavior of the error is different. For p > 2a, we have rj = 2zi + 2±1 exactly, 
and so the error term has roughly | terms. Further, from [TJ Ch. 5, §4], we have 

^~r~ / \ ( p= 1,5 (mod 8) 

E ( — ) = i _3/i p p = 3 ( mod 8 ) 

X =A p s { -h p p = 7 (mod 8). 
Thus, the term R aj b may dwarf h p l Rather, if we define 

q+l 
2 

Pa.b ■= S-r + E 
x=l 
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then \p ajb \ < 



2^, and ([H]) can be rewritten: 



Sf — Pa.b 



P 



+ 



{ 



-2h 



'V 







p 3 (mod 8) 
p = 3 (mod 8). 



This gives a better description of the behavior of the sum Sf when a is odd. 
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